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RELIABILITY  ANALYSIS  FOR  FDDI 
DUAL  HOMING  NETWORKS 


1.  INTRODUCTION 

Fiber  Distributed  Data  Interface  (FDDI)  is  a  high-speed,  fiber-optic  token  network  consisting  of  two  counter-rotat¬ 
ing  rings  [1].  In  addition  to  the  fault  tolerant  level  provided  by  the  dual  rings,  the  reliability  of  an  FDDI  network  is 
enhanced  by  the  use  of  station  bypass  switches  or  concentrators  (CONs)  [1,2,  3],  A  station  equipped  by  a  bypass 
switch  is  switched  out  of  the  ring  when  the  station  experiences  a  power  failure.  A  CON  facilitates  the  connection  of 
stations  to  the  ring  and  also  switches  out  of  the  ring  any  faulty  station  connected  to  it.  The  use  of  reliable  CONs  to 
interconnect  stations  is  the  heart  of  the  dual  homing  configuration. 

The  simplest  way  to  form  an  FDDI  network  of  N  dual  attach  stations  (DASs)  is  to  interconnect  the  stations  as 
shown  in  Fig.  1.  To  use  the  reliability  provided  by  two  counter-rotating  rings,  DASs  must  be  used  in  the  FDDI  net¬ 
work.  The  DASs  can  be  any  type  of  dual  attach  nodes  such  as  gateways,  CONs,  or  servers.  This  simple  configuration 
(Fig.  1)  is  called  the  dual  ring  network. 


Fig.  I  —  Dual  ring  network 


The  reliability  function  r{t )  of  the  dual  ring  is  given  in  Ref.  2.  Suppose  that  optical  bypass  switches  in  the  DASs 
are  working  perfectly,  then 


r(t)  =  mo2*'2- (lV-l)f(')2N, 


(1) 


where  N  is  the  number  of  DASs  and/(0  is  the  reliability  function  of  one  of  the  2N  links.  A  dual  homing  analogy  of 
Eq.  (1)  is  derived  in  the  next  section.  Equation  (1)  is  valid  under  the  assumption  that  the  dual  ring  is  reliable  as  long 
as  the  ring  is  not  segmented.  Optical  bypass  switches  in  DASs  switch  any  station  that  has  no  power  out  of  the  ring; 
thereiorc,  ihe  reliability  of  the  ring  is  not  affected  unless  the  number  of  activated  optical  bypass  switches  is  excessive. 
However,  the  loss  caused  by  activated  bypass  switches  affects  both  the  dual  ring  and  the  dual  homed  netwoik  almost 
equally.  This  report  will  not  take  the  DAS  faults  into  consideration.  Keep  in  mind  that  these  results  can  be  extended 
straightforwardly  to  incorporate  the  DAS  faults  into  the  model  as  is  done  in  Ref.  2. 
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An  alternative  for  the  dual  ring  network  is  the  dual  homing  network,  which  is  shown  in  Fig,  2.  As  expected,  the 
reliability  of  the  dual  homing  network  is  improved  in  many  cases  by  using  two  additional  reliable  CONs  and  40V  +  1) 
fiber  links  instead  of  using  only  the  2 V  fiber  links  that  were  used  in  the  dual  ring  network.  The  quantification  of  this 
observation  is  given  in  Sections  2  and  3.  In  addition  to  providing  further  reliability,  the  dual  homing  network  is  highly 
structured  and  hence  facilitates  network  management  as  well  as  network  expansion/reduction;  stations  may  be  added 
to  or  removed  from  the  network  without  altering  its  structure. 
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Fig.  2  —  Dual  homing  network 


The  FDDI  dual  homing  architecture  has  been  proposed,  studied,  and  implemented  for  several  years.  The  compari¬ 
son  between  dual  homing  and  other  types  of  configurations  is  reviewed  in  Ref.  3.  The  availability  of  the  path  between 
user  and  backbone  is  discussed  in  Ref.  4  for  multiple  level  FDDI  dual  homing.  The  goal  of  this  paper  is  to  derive  reli¬ 
ability  results  of  the  dual  homing  network  shown  in  Fig.  2  (as  well  as  its  extensions  shown  in  Fig.  3),  where  each 
CON  has  an  arbitrary  reliability  function  c(r),  N  is  the  number  of  DASs,  each  of  the  four  links  connecting  the  two 
CONs  has  a  general  reliability  function  /(/) ,  and  each  of  the  4V  links  connecting  DASs  to  the  two  CONs  has  an  arbi¬ 
trary  reliability  function  fit).  It  is  assumed  that  all  components  fail  independently  and  that  each  CON  is  capable  of 
handling  N  DASs.  It  is  important  to  note  that  the  link  fault  can  be  any  fault  that  causes  the  ring  to  wrap  or  to  be  seg¬ 
mented  and  can  include  many  types  such  as  fiber  cuts,  severe  dB  loss,  or  faulty  station  transceivers.  This  simple  dual 
homing  model  is  fundamental  for  the  following  reasons: 

•  The  model  is  the  dual  homing  counterpart  of  the  dual  ring  shown  in  Fig.  1 .  Most  FDDI  backbone  rings  can  be 
transformed  into  either  one  of  these  two  configurations  since  FDDI  standards  require  that  the  FDDI  backbone 
be  connected  by  dual  attach  nodes. 

•  Many  other  FDDI  configurations  involving  dual  homing  can  be  analyzed  by  using  this  dual  homing  model  as 
the  basic  building  block  (Sections  2  and  3);  with  the  use  of  only  one  pair  of  CONs  as  shown  in  Fig.  2,  the 
insight  can  be  gained  more  easily  from  this  simple  dual  homed  network  model. 

•  It  is  desirable  to  have  a  closed  form  and  yet  simple  formula,  which  is  a  dual  homing  counterpart  of  Eq.  (1)  and 
can  be  computed  in  a  straightforward  manner  (Theorem  1). 

•  The  model  analysis  shows  that  dual  homing  is  beneficial  only  if  certain  network  parameter  constraints  arc  met 
(Theorem  2), 

2.  RELIABILITY  RESULTS  FOR  DUAL  HOMING  NETWORK  OF  FIGURE  2 

This  secuciM  is  devoted  to  the  derivation  of  the  reliability  function  for  the  dual  homing  network  posed  in  Section  1. 
Then  a  numerical  example  is  given  to  apply  the  derived  formula,  followed  by  a  theorem  about  nc ..  ork  parameter 
constraints  for  a  p.^pu  dual  homing  implementation.  A  more  general  model  is  analyzed  in  the  next  section. 
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l Jit  ft),  /(f) ,  c(t),  and  R(t)  be  reliability  functions  of  the  link  connecting  DASs  to  the  CONs,  of  the  link  connect¬ 
ing  two  CONs,  of  the  CON,  and  of  the  dual  homing  network  respectively  (Fig.  2).  Furthermore,  let  N  be  the  number 
of  DASs.  The  network  is  said  to  be  operational  (i.e.,  reliable)  if  there  is  a  communication  path  among  all  DASs  (i.e., 
the  network  is  not  segmented). 

Theorem  1 


«(0  =  {[2/(r)2-/(04]  1 2/(r) 2 -/(f) 41  +/(/)2JV[l-/(t)2| 


}e(f)2+/(0‘A2C(0  ( 1  -  c  ( 0  j 


Proof: 

Let  X  be  the  random  variable  representing  the  operational  time  of  the  dual  homing  network  shown  in  Fig.  2.  For 
each  t  >  0,  consider  two  mutually  exclusive  and  exhaustive  events  Ait)  and  Bit)  for  the  CONs.  Ait)  is  the  event  that 
two  CONs  are  still  operational  at  time  t  and  S(f)  is  the  event  that  only  one  CON  is  still  operational  at  time  r.  Then 

Pr{A(t)}  =  c(r)2  and  Pr{B(t)}  =  2c(t)  [l-c(/)l  -  (2) 

Let  Aj(t)  be  the  event  that  the  root  ring  (i.e.,  the  ring  connecting  the  two  CONs)  is  not  segmented  befoie  t.  Then 
from  Eq.  (1)  with  N  =  2 


Pr{Ax(t)\A(i))  =  2/(f)2-/(f)4.  (3) 

Let  A2(t)  be  the  event  that  the  root  ring  is  segmented  before  f.  Then  from  Eq.  (3) 

Pr{A2(t)\A{t)}  =  l  -  Pr  (Aj  (f)|  A  (f)  }  =  [l-/(f)2}2.  (4) 

Then  Pr  (X>  f|  A  (r) ,  Ax  (r) }  is  computed  as  follows:  With  the  presence  of  the  two  operational  CONs,  effectively 
the  fiber  links  always  fail  in  pairs  with  a  new  reliability  function  fit) 2  for  each  pair.  Each  DAS  is  disconnected  from 
the  dual  homed  network  when  both  pairs  (each  with  reliability  function  fit)1)  fail;  that  is,  the  reliability  associated 
with  each  DAS  is 


l-  U-/(f)2]2  =  2/(i)2-/(t)4. 


Since  there  are  N  such  DASs, 

Pr{X>f(A(i).A1(f)}  =  (2/(f)2-/(r)4]*  (5) 

Eq.  (5)  is  used  several  times  in  the  computation  in  the  next  section. 

For  the  case  where  the  root  ring  is  segmented,  which  results  in  two  identical  rings  of  single  attach  stations  (SASs), 
Pr{X>t\A  (f),A2(r) }  is  computed  as  follows:  Note  that  the  second  ring  is  no  longer  considered  reliable  because  if 
it  is  reliable,  then  all  of  the  links  at  port  B  would  have  to  fail  simultaneously;  this  is  impossible  as  fit)  is  associated 
with  a  continuous  random  variable  by  assumption.  Port  B  links  are  always  active  unless  there  are  faults  associated 
with  them.  Therefore, 


Pr{X>  A  (f),  A2(r)  }  =/(f)2* 


(6) 


From  Eqs.  (3)  to  (6)  and  the  fact  that 

Pr  {X>  f)  A  (t)  }  =  Pr{X>fiA(f),A1(f)}Pr{M1(f)|A(l)}  +Pr  {X>H  A  (r),  A2  (f)  } /V  {A2  (f)|  A  (f)  }  , 
Pr{X>t\A  (f) )  =  [2/(r)2-/(r)4M2/(f)2-/(f)4]  +f{t)2N[\-}it)2]  . 


(7) 
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Note  that 


Pr  {X>  t\  B  (t) }  =  f(t)2N.  (8) 

Then  from  Eqs.  (2),  (7),  (8)  and  the  fact  that 
fl(r)  =  Pr{X>t }  =  Pr{X>t\  A(t)  }  Pr  {A  (f)  }  +  Pr{X>  f|  B{t)  }  Pr{B  (t)  }  , 

R(t )  =  {  [2/(t)2-/(/)4]A,[2/(t)2-/(t)4]  +/(f)2iV[l  -H‘)2]2}c(t)2  +f(t)2N2c(t)  [1  -c(f)  ] .  Q.E.D. 

ItOiisrlcs 

•  Suppose  that  two  perfect  CONs  with  c(t)  =  1  are  used  and  that  the  root  ring  is  not  segmented  (i.e.,  /(r)  =  1 ). 
Then  Theorem  1  becomes 


R(t)  =  [2 m2-fU)4]N,  (9) 

which  must  be  an  upper  bound  for  the  reliability  function  R{f)  of  the  dual  homing  network.  This  upper  bound 
can  be  approached  as  close  as  desirable  by  using  two  very  reliable  CONs  as  well  as  four  very  reliable  (e  g., 
very  short)  links. 

•  The  reliability  function  in  Theorem  1  is  dependent  on  /,/,  and  c ;  i.e.,  R  =  R  (f,f,  c)  (here,  for  ease  of  writing, 
the  time  variable  t  is  suppressed).  Then  an  upper  bound  for  the  reliability  function  R,  which  is  tighter  (and 
more  complicated)  than  Eq.  (9),  is  given  by 

R  <,min  {R  (1,/,  i  ,c),R(fj,  1  ),R(f,  1,  1),  *(!,/,  !),*(!,  1,  c)  }  .  (10) 


Note  that  fl(/,l,l)  is  the  same  as  Eq.  (9). 

Example  1 

Suppose  that  /(r)  =  c  (/)  =  /(/)  =  e~° 001 where  t  is  the  time  measured,  for  instance,  in  days.  This  will  give  the 
mean  time  to  failure  (M  ITE)  of  both  the  CON  and  fiber  link  the  value  of  1/0.001  =  1000  days.  Then  the  reliability  of 
the  dual  ring  as  well  as  the  dual  homing  network  for  various  values  of  t  and  N  (the  number  of  DASs)  is  given  in  Table 
1  (Af  is  the  number  of  CON  pairs,  M  =  1  in  this  example). 

From  Table  1,  for  small  network  sizes  (e.g.,  N  =  5),  the  dual  ring  network  is  slightly  more  reliable  than  the  dual 
homing  network  since  it  is  less  likely  that  the  small  dual  ring  will  be  segmented.  For  larger  values  of  N(N>  9),  dual 
homing  consistently  becomes  more  reliable  than  dual  ring.  Finally,  as  expected,  the  reliability  upper  bound  value  for 
dual  homing  is  the  greatest  among  the  three  values.  The  following  theorem  confirms  the  superiority  of  dual  homing 
(Eq.  (9))  to  dual  ring  (Eq.  (1))  when  dual  homing  is  properly  implemented  (i.e.,  when  N  5  4  and  the  reliability  upper 
bound  (Eq.  (9))  is  approached). 

Theorem  2 

(a)  n/n~2-  (N-  l)/N>  (2/-/)*  for  N=  1,  2, 3  and  all  fe  (0,1). 

That  is,  a  small  dual  ring  network  is  more  reliable  than  a  small  dual  homing  network  with  the  same  number  of  DASs 
N  =  1,2, 3  (see  Eq.  (9)). 

(b)  NfN~2- (N-l)fN<  (2/~/)N  for  all  A24andall  fe  [72/2,1). 

That  is,  if  c  =  l  and  }  =  1,  dual  homing  is  more  reliable  than  dual  ring  for  A  2  4  and  /2:  Jl/2  (see  Eq.  (9)). 
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Table  1  —  Reliability  of  Dual  Homing 
and  Dual  Ring  Network 


'computed  from  Eq.  (9):  reliability  upper  bound 
for  dual  homing  network 
^computed  from  Theorem  1 :  reliabilty  for  dual 
homing  network 

3computed  from  Eq.  (1):  reliability  for  dual 
ring  network 
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Proof: 

(a)  is  dearly  true  for  N  =  1, 2.  For  N  =  3 ,  observe  that  3  ( l  -/) 3  >/  ( 1  -/) 3 ,  which  can  be  written  after  some 
algebra  as 

3/-2/>  (2/-/)3. 

Therefore  (a)  is  also  true  when  N  =  3 . 

When  N  =  4 ,  (b)  becomes  4/  -  3/  <  (2/  -/)  ,  which  can  be  written  after  some  algebra  as 

o<(i-/M(-4  +  h/-6/)  +/] ; 

however,  -4+  11/ -6/ so  when  /  a  1/2  or  =  0.7071 ....  Therefore  (b)  is  true  at  W  =  4.  Note  that 

numerical  computation  shows  that  (b)  is  also  true  when  N  -  4  if  /  =  0.69183  and  is  false  if  /  =  0  69182.  Then  (b)  is 
proved  for  all  N>.  4  and  all  ftjl/l  by  induction  as  follows.  Suppose  that  (b)  is  true  at  N.  Then  since 

(l-/2)2  =  l-2/+/>0, 
it  can  be  shown  after  some  algebra  that 

[n/N~2-(N~  l)/N]  (2/-/)  >  (A7+  1  )fN-N/tN+2; 
therefore,  from  induction  hypothesis  ((b)), 

(2/-/)W+1X^+1)/V-w/A,+2=  (N+1>/<JV+,)-2-n/(A,+  1). 

Thus  (b)  is  also  true  at  N  + 1 ;  hence  the  induction  proof  is  completed.  Q.E.D. 

Theorem  2  shows  that  in  most  cases,  dual  homing  is  more  reliable  than  dual  ring;  however,  to  better  use  the  dual 
homing  technique,  the  following  should  be  met: 

•  the  number  of  DASs  N  must  be  at  least  four 

•  the  link  reliability  fit)  is  at  least  J'. 2/2  =  .7071 . . . 

•  the  ring  comprising  two  CONs  must  be  reliable. 


3,  AN  EXTENSION 

This  section  analyzes  the  dual  homing  network  as  shown  in  Fig.  3,  which  is  a  natural  extension  of  the  network  of 
Fig.  2.  Specifically,  let  M  be  the  number  of  CON  pairs  (one  such  pair  looks  like  the  one  shown  in  Fig.  2).  As  before, 
each  CON  can  serve  N  DASs  and  has  reliability  function  c(0-  The  ring  consisting  of  2 M  CONs  is  called  the  root  ring. 


Fig.  3  Extended  dual  homing  network 
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Furthermore,  each  of  the  (fiber)  links  used  for  interconnecting  2M  CONs  has  reliability  function  f(t),  and  fi  t)  is  the 
reliability  function  for  each  of  4 MN  links  used  for  connecting  DASs  to  CONs.  All  components  are  assumed  to  fail 
independently.  Other  definitions  from  the  previous  section  such  as  X  and  R(i)  (Theorem  1)  are  also  carried  into  this 
section.  Note  that  the  number  of  DASs  now  becomes  MN. 

Then  the  reliability  function  R(t)  of  the  dual  homing  network  shown  in  Fig.  3  is  given  by 
Pr{X>l)  =  Pr  {X>  f|  the  root  ring  is  not  segmented  }  Pr  (the  toot  ring  is  not  segmented  } 

+  Pr{X>  t,  the  root  ring  is  segmented  >  .  (11) 

Each  of  the  two  unknown  components  in  the  above  summation  is  computed  as  follows: 

First  let  L  be  the  number  of  working  CON  pairs.  Then  from  the  analysis  in  Section  2  (Eq.  (5)) 

*r  M-m 

?  *  7  m  S' 

Pr  (X >  r|  L  =  M  -  m,  the  root  ring  is  not  segmented  }  =  (  (2/(r)  -/(r)  ]  )  /(*) 

and 

Pr{L=  M-m)  =  [jj]c(r)2(M'm)  (2c(r)  [l-c(f)))m. 

Therefore  from  the  above  two  equations, 

M  ^  M-m  /  \ 

Pr{X>  r|  the  root  ring  is  not  segmented  }  =  ^  ( [2/(0  2  -/(*) 4]  )  /(/)  Jc  ( t)2^M  (2r  (/)  [  I  -  c  (r) )  )m , 

m  -  0 


Letting  N  =  2M  in  Eq.  (1)  gives  Pr  { the  root  ring  is  not  segmented }  =  (1  -  2M)f{t)*M  +  2M?(t)*M~2 . 

From  the  above  two  equations, 

Pr  (X  >  f|  the  root  ring  is  not  segmented  }  Pr{  the  root  ring  is  not  segmented  } 

M  N  M-m  f  \ 

=  X  ([2/(02-/(04]  )  f(t)2mN{2jC«)2lM~m)  [l-c(t)])m 

m  =  0 

X  [(l-2Af»/(r)4W  +  2A^(r)4M'2].  (12) 

Then  by  the  same  argument  used  in  the  previous  section,  an  upper  ound  for  the  reliability  function  R(t)  is 

,  ,  UN 

/?(r)  s:  [2/(0  -/(f)  1  .  03) 

Note  that  the  remarks  after  Theorem  1  as  well  as  Theorem  2  in  the  previous  section  remain  valid,  with  slight  mod¬ 
ification,  in  this  case  (Eq.  (9)). 

The  probability  Pr{X>t,  the  root  ring  is  segmented  }  is  computed  as  follows,  depending  on  two  cases:  M  =  2  and 
M*2. 

Case  1:  M  =  2 

This  is  the  case  where  there  are  four  CONs.  Given  the  fact  that  X  >  t  and  the  root  ring  is  segmented,  there  are  only 
two  types  of  ring  segmentations: 

•  The  ting  is  segmented  evenly  resulting  in  two  identical  and  parallel  rings:  the  first  ring  consists  of  CON(l.l) 
and  CON(2,l),  and  the  second  ring  consists  of  CON(l,2)  and  CON(2,2).  Note  that  the  second  ring  is  no  longer 
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considered  reliable  because  if  it  is  reliable,  then  all  of  the  links  at  port  B  would  have  to  fail  simultaneously, 
which  is  an  impossible  event  as/fr)  is  associated  with  a  continuous  random  variable.  Port  B  links  are  always 
active  unless  there  are  faults  associated  with  them. 

•  The  ring  is  segmented  unevenly  resulting  in  two  different  rings:  one  ring  has  only  one  CON  and  the  other  ring 
has  three  CONs. 

First  note  that  for  L  =  0, 

Pr  {  X  >  f,  L  =  0,  the  root  ring  is  segmented  unevenly  } 

st  Pr  {X>  r|  L  -  0,  the  root  ring  is  segmented  unevenly  }  Pr  {L  =  0  }  Pr  { the  root  ring  is  segmented  unevenly  I  /,  =  0  } 

=  4/(0  *N2c  ( f y 2  [  1  -  c  ( t) } 2  [4  { 1  -/( f) )  /( O' 6  +  4  ( 1  -/( /) )  /( f) 5  +/( f ) 4  ( 1  -/( f ) )  *]  . 

Similarly, 

Pr  (X>  r,  L  =  0,  the  root  ring  is  segmented  evenly  } 

=  Pr{X>  r|  L  =0.  the  root  ring  is  segmented  evenly  }  Pr  {L  =0  }  Pr(  the  root  ring  is  segmented  evenly  1  L  =  0} 

=  /(t)4A,2c(t)2[l-c(r)l2[«t(l  -/(i))2/(f)6  +  4(l-/(r))3/(t)5+/(r)4(l-/(t))4]  .  (14) 

Summing  the  above  two  equations  gives 

Pr  {X>t,L  =  0,  the  root  ring  is  segmented  } 

=  10/(r)4iVc(r)2 [l-c(r)]2[4(l-/(r))2/(f)6  + 4(1 -/(/)) /(t)5 +/(r)4(l-/(r))^].  (15) 

ForL  =  1, 

Pr  {  X  >  f,  L  =  1 ,  the  root  ring  is  segmented  evenly  } 

=  /(f) 4*4c  (r) 3  [  1  -  c  (f)  1  [4  ( 1  -/(f) )  /(f) 6  +  4  ( 1  -/(f) )  /(f) 5  +/(f) 4  ( 1  -/(f) )  *] 

and 

Pr  {X>  f,  L  =  1 ,  the  root  ring  is  segmented  unevenly  } 

=  (12/(f)2-/(«)4l  /(t)2*)4c(r)3U-c(f)l  [4(1 -/(*))  /(f)6  +  4(I-/(t))7(05+/(f)4(l-/(f))  J. 

Then  summing  the  above  two  equations  gives 

Pr  {  X  >  f,  L  =  1 ,  the  root  ring  is  segmented  } 

=  ( (2/(f) 2  -/(f>4]'7(f)  2"+/(f)  *N)  4c  (f) 3  ( 1  -  c  (f)  ] 

x  [4  ( 1  -/(f) ) 2/(f) 6  +  4  ( 1  -/(f) ) 3/(f) 5  +/(f) ' 4  ( 1  -/(f) ) *]  .  (16) 

ForL  =  2, 

Pr  {  X>  t,  L  =  2,  the  root  ring  is  segmented  evenly  } 

=  /(f)  *Sc  (f) 4  [4  ( 1  -/(f) )  2/(f) 6  +  4  ( 1  -/(f) )  3/(f ) 5  +/(f ) 4  ( 1  -/(f)  )*} 
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and 

P  {X>  f,  L  =  2,  the  root  ring  is  segmented  unevenly  } 

=  4((2/(02-/(04]//(02A')c(f)4[4(l-/(t))V(06  +  4(l-/(f))  /(05+/(04(l -/('))*]. 

Hence  by  summing  the  above  two  equations, 

Pr{X>t,  L  =2,  the  root  ring  is  segmented  } 

=  (4(2/(02-/(f)4]W/(t)2W+/(r)4W)c(/)4[4(i-7(/))2/0)6  +  4(l-7(0)7(05+/(04(l-/(0)+]-  (17) 

Then  by  summing  Eqs.  (15),  (16)  and  (17): 

2 

Pr  (X >  t,  the  root  ring  is  segmented  }  =  X  Pr  {X  >  r,  L  -  i,  the  root  ring  is  segmented  } 

i  =  0 

=  [4(1  -7(0 ) 27(0 6  +  4  ( 1  -7(o )  7(0 5  +7(04 ( 1  -7(0 )  1  x  {  iqao anc (o 2  ( 1  - c  (o i 2 

+  ([2/(02-/(04]A/(02Af+/(04A')4c(03fl-c(0)  +  (4{2/(02-/(04]*/(02*+/(04V(04 }  •  (18) 

Case  2:  M*  2 

Note  that  the  necessary  condition  for  the  segmented  network  to  be  reliable  in  this  case  is  that:  At  most  one  CON  is 
isolated.  Then  it  can  be  shown  that 

Pr  { X >  /,  the  root  ring  is  segmented  }  =  Pr  [X>  f,  only  one  CON  is  isolated  } 

•  X  <12/(02-/(04]W)  f(t)2Nm[^\c(t)2(M~m)  [2c(0  <l-c(0)]m 

m  =  0 

x  [4  ( 1  -7(0 ) 27(0 4"' 2 + 4  ( i  -7(0 )  7(o4W- 3  +  ( 1  -7(o )  7(0 m  *] 


x  \f(t)2N  (M  -  m)  +m[2/(02-/(04]T.  <-9) 

Then  by  combining  Eqs,  (1 1),  (12),  (18),  and  (19)  results  in  the  following  theorem,  which  is  an  extension  of  Theo¬ 
rem  1. 


Theorem  3 

M  jy  M  -  m  ^  ''V 

R(t)  =  X  ( [2/(02-JT(r)4J  )  /(02m',[™Jc(02(""m)(2c(0  [l-c(01)'"Kl-2A07(04W+2^7(0 

m  =  0 

+  S(M,  0, 


4W-2, 


where  S(Af,  t)  =  Pr  {X>  t,  the  root  ring  is  segmented } ,  which  is  given  by  Eq.  (18)  if  M  =  2  and  by  Eq.  (19)  if  M*  2. 
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Note  that  Theorem  3  reduces  to  Theorem  1  when  M  =  1.  Theorem  2  in  the  previous  section  remains  valid  if  N 
DASs,  which  were  used  in  that  theorem,  are  replaced  by  MN  DASs  in  this  section. 


Example  2 

Suppose  that  Example  1  in  the  previous  section  now  is  extended  to  include  six  CONs  (i.e.,  M  -  3).  Then  the  reli¬ 
ability  values  computed  at  t  =  5, 10,  and  50  days  are  given  in  Table  2. 

Note  that,  by  comparing  Table  2  with  Table  1  in  the  previous  section,  the  dual  homing  network  with  M  =  1  is  m ore- 
reliable  than  that  with  M  =  3  even  though  their  reliability  upper  bounds  (Eqs.  (9)  and  (13))  remain  the  same. 


Table  2  —  Reliability  of  Dual  Ring  and 
Extended  Dual  Homing  Network 


M  =  3 

mam 

t=  10 

f  =  50 

r4 

II 

1 

0.9979' 

0.9918 

0.8261 

(N=7) 

0.99472 

0.9795 

0.6492 

MV  =39 

0.9961 

0.9848 

0.7013 

(N  =  13) 

0.9913 

0.9669 

0.5137 

MV  =  48 

0.9953 

0.9814 

0.6462 

(AT=  16) 

0.9897 

0.9609 

0.4624 

'computed  from  Eq.  (13):  upper  bound  for  dual 
homing  network 

^computed  from  Theorem  3:  extended  dual 
homing  network 


4.  CONCLUSION 

Closed  form  reliability  functions  for  the  FDDI  dual  homing  networks  are  derived  (Theorems  1  and  3).  In  most 
cases,  dual  homing  is  more  reliable  than  dual  ring;  however,  dual  homing  technique  is  beneficial  only  if  the  following 
conditions  are  met  (Theorem  2): 

•  the  number  of  DASs  must  be  at  least  four 

•  the  link  reliability  should  be  at  least  Jl/2  =  .7071 ... 

•  the  root  ring  comprising  CONs  must  be  reliable 

•  the  number  of  CON  pairs  on  the  root  ring  should  be  as  small  as  possible 
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